Add type check for request.user being CustomUser instance before setting order.modified_by field in order_create and order_update views to prevent errors when user is not a CustomUser (e.g., admin user)